CVE-2022-21888— Windows Modern Execution Server Remote Code Execution Vulnerability

Quick assessment

Copy summary Copy citation

Affected

Microsoft Windows 10 Version 1809

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。 Microsoft Windows Modern Execution Server 存在代码注入漏洞，该漏洞源于外部输入数据构造代码段的过程中，网络系统或产品未正确过滤其中的特殊元素。攻击者可利用该漏洞生成非法的代码段，修改网络系统或组件的预期的执行控制流。

CVE-2022-21888 affects Microsoft Windows 10 Version 1809. No confirmed in-the-wild exploitation; assess based on exposure. Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。 Microsoft Windows Modern Execution Server 存在代码注入漏洞，该漏洞源于外部输入数据构造代码段的过程中，网络系统或产品未正确过滤其中的特殊元素。攻击者可利用该漏洞生成非法的代码段，修改网络系统或组件的预期的执行控制流。 CVE-2022-21888 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2022-21888

I. Basic Information for CVE-2022-21888

Affected Products

II. Public POCs for CVE-2022-21888

III. Intelligence Information for CVE-2022-21888

Vendor Advisories for CVE-2022-21888 (1)

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21888 x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2022-21888

Same Patch Batch · Microsoft · 2022-01-11 · 100 CVEs total

Showing top 20 of 100 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2022-21888